What is Cyber Security?
Cyber Security consists of the processes, practices and technologies designed to protect networks, computers, programs and data from attack, damage or unauthorised access.
There are a number of different ways threats can happen including:
It is the manipulation of people into handing over confidential information such as a PIN, password, bank details or money.
What is malicious code (malware)?
Malicious code is software written to harm or cause issues with a computer. This is also referred to as malware and comes in a number of different forms. In all its forms, the code has been written to either harm or steal data from your computer system.
Examples below -
What is pharming?
Keywords - DNS, IP Address, poison
Weak and Default Passwords -
Weak Passwords: Those which do not have the required length or do not comprise random characters.
Default Passwords: The security credentials that are supplied by the initial provider of the service.
Misconfigured Access Rights -
The security credentials that are supplied by the initial provider of the service. Access rights set up what can and cannot be seen when someone logs into a system. If these are not set up correctly in an email server, a person may be able to see someone else’s emails. If a person accesses an account that they do not have permission to see, they might be breaking the law.
Removable Media -
Removable media refers to storage devices that can be removed from the computer system. If removable media contain malware, it will attempt to move onto a system when connected to a computer, and then onto any other connected devices. If a computer is connected to others on a network, this could mean that the virus reaches hundreds of machines.
Unpatched or Outdated Software -
Patching is the process of updating software to fix a problem or add a new feature.
Many programs will automatically update to make sure they have the latest patches installed. This helps to ensure the program runs correctly and protects the computer from new threats which are created daily. Most anti-virus software will frequently update itself so that it is able to recognise the latest computer viruses and malware.
Factors of Authentication -
The security methods used to access computer accounts. These are ways to prove that people are who they say they are. These factors can be divided into three sections:
The process of attempting to gain access to resources without knowledge of usernames, passwords and other normal means of access.
Malicious Insider -
When the person or team testing the system has knowledge of and possibly basic credentials for the target system, simulating an attack from inside the system.
External Attack -
When the person or team testing the system has no knowledge of any credentials for the target system, simulating an attack from outside the system.
You may see Malicious Insider referred to as White Box Testing and External attack as Black Box Testing
What is Cyber Security?
Cyber Security consists of the processes, practices and technologies designed to protect networks, computers, programs and data from attack, damage or unauthorised access.
There are a number of different ways threats can happen including:
It is the manipulation of people into handing over confidential information such as a PIN, password, bank details or money.
What is malicious code (malware)?
Malicious code is software written to harm or cause issues with a computer. This is also referred to as malware and comes in a number of different forms. In all its forms, the code has been written to either harm or steal data from your computer system.
Examples below -
What is pharming?
Keywords - DNS, IP Address, poison
Weak and Default Passwords -
Weak Passwords: Those which do not have the required length or do not comprise random characters.
Default Passwords: The security credentials that are supplied by the initial provider of the service.
Misconfigured Access Rights -
The security credentials that are supplied by the initial provider of the service. Access rights set up what can and cannot be seen when someone logs into a system. If these are not set up correctly in an email server, a person may be able to see someone else’s emails. If a person accesses an account that they do not have permission to see, they might be breaking the law.
Removable Media -
Removable media refers to storage devices that can be removed from the computer system. If removable media contain malware, it will attempt to move onto a system when connected to a computer, and then onto any other connected devices. If a computer is connected to others on a network, this could mean that the virus reaches hundreds of machines.
Unpatched or Outdated Software -
Patching is the process of updating software to fix a problem or add a new feature.
Many programs will automatically update to make sure they have the latest patches installed. This helps to ensure the program runs correctly and protects the computer from new threats which are created daily. Most anti-virus software will frequently update itself so that it is able to recognise the latest computer viruses and malware.
Factors of Authentication -
The security methods used to access computer accounts. These are ways to prove that people are who they say they are. These factors can be divided into three sections:
The process of attempting to gain access to resources without knowledge of usernames, passwords and other normal means of access.
Malicious Insider -
When the person or team testing the system has knowledge of and possibly basic credentials for the target system, simulating an attack from inside the system.
External Attack -
When the person or team testing the system has no knowledge of any credentials for the target system, simulating an attack from outside the system.
You may see Malicious Insider referred to as White Box Testing and External attack as Black Box Testing
